(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 
International Bureau 

(43) International Publication Date 
8 March 2001 (08.03.2001) 




PCT 



lllfllllllli 

(10) International Publication Number 

WO 01/16900 A2 



(51) International Patent Classificatio n 7 : 



G07F 7/10 



(21) International Application Number: PCT/US00/23817 

(22) International Filing Date: 30 August 2000 (30.08.2000) 

(25) Filing Language: English 

(26) Publication Language: English 



(30) Priority Data: 

60/151,880 
60/164,668 
60/165,577 
60/201,635 



31 August 1999 (31.08.1999) US 

9 November 1 999 (09. 1 1 . 1 999) US 

15 November 1999(15.11.1999) US 

3 May 2000 (03.05.2000) US 



(71) Applicant: AMERICAN EXPRESS TRAVEL RE- 
LATED SERVICES COMPANY, INC. [US/US]; 
American Express Tower, World Financial Center, New 
York City, NY 10285-4900 (US). 

(72) Inventors: BENNETT, Russell; 10877 East Pear Tree 
Drive, Cornville, AZ 86325 (US). BISHOP, Fred; 2811 



West Dynamite Boulevard, Phoenix, AZ 85085 (US). 
GLAZER, Elliot; 14107 Chiasso Terrace, Chesterfield, 
VA 23838 (US). GORGOL, Zyg; 10786 East Terra 
Drive, Scottsdale, AZ 85258 (US). HOHLE, William, 
G.; 10882 West Cedarfort Road (8570 North), Lehi, UT 
84043 (US). JOHNSTONE, David; 28618 North 60th 
Place, Cave Creek, AZ 85331 (US). LAKE, Walter, D.; 
719 West Rawhide Avenue, Gilbert, AZ 85233 (US). 
SIMKIN, Marvin; - (US). SWIFT, Nick; 38 Water Road, 
Reading, Greater London RG30 2NN (GB). WHITE, 
Dirk; 6638 West Via Montoya, Glendale, AZ 85310 (US). 
JOHNSON, Michael; 9154 North 97th Avenue, Peoria, 
AZ 85345 (US). ROYER, Coby; 7833 Stanford Avenue, 
University City, MO 63130 (US). 

(74) Agent: SOBELMAN, Howard, L; Snell & Wilmer L.L.P., 
One Arizona Center, 400 East Van Buren, Phoenix, AZ 
85004-2202 (US). 

(81) Designated States (national): AE, AG, AL, AM, AT, AU, 
AZ, BA, BB, BG, BR, BY, BZ, CA, CH, CN, CR, CU, CZ, 
DE, DK, DM, DZ, EE, ES, FI, GB, GD, GE, GH, GM, HR, 
HU, ID, IL, IN, IS, JP, KE, KG, KP, KR, KZ, LC, LK, LR, 
LS, LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, MZ, 

[Continued on next page J 



(54) Title: METHODS AND APPARATUS FOR CONDUCTING ELECTRONIC TRANSACTIONS 



1CKX 



CUSTOMER 




no 





< 




MERCHANT 
120 



152 





SECURITY 




130 




(57) Abstract: A system and method for conducting electronic commerce are disclosed. In various embodiments, the electronic 
*i transaction is a purchase transaction. A user (110) is provided with an intelligent token (202), such as a smartcard containing a 
digital certificate. The intelligent token suitably authenticates with a server on a network (130) that conducts all or portions of the 
transaction on behalf of the user. In various embodiments a wallet server (140) interacts with a security server (130) to provide 
enhanced reliability and confidence in the transaction. In various embodiments, the wallet server includes a toolbar (502). In various 
embodiments, the digital wallet pre-fills forms. Forms may be pre-filled using an auto-remember component. 
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purchaser's charge card number, the protocol does , not provide any means for 
ensuring that the charge card number itself is valid, or that the person providing the 
card number is legally authorized to do so. Because of the high incidence of fraud in 
Internet transactions, most charge card issuers consider network transactions to be 

5 "Card Not Present" transactions subject to a higher discount rate. Stated another way, 
because of the increased risk from "Card Not Present" transactions, most charge card 
issuers charge the merchant a higher rate for accepting card numbers via electronic 
means than would be charged if the card were physically presented to the merchant. 

To improve the security deficiencies inherent in transporting charge card 

10 numbers over unsecure networks, many have suggested the use of "smart cards". 
Smart cards typically include an integrated circuit chip having a microprocessor and 
memory for storing data directly on the card. The data can correspond to a 
cryptographic key, for example, or to an electronic purse that maintains an electronic 
value of currency. Many smartcard schemes have been suggested in the prior art, but 

15 these typically exhibit a marked disadvantage in that they are non-standard. In other 
words, merchants typically must obtain new, proprietary software for their Web 
storefronts to accept smartcard transactions. Moreover, the administration costs 
involved with assigning and maintaining the cryptographic information associated with 
smart cards have been excessive to date. 

20 The Secure Electronic Transaction (SET) standard has been suggested to 

improve the security of Internet transactions through the use of various cryptographic 
techniques. Although SET does provide improved security over standard SSL 
transactions, the administration involved with the various public and private keys 
required to conduct transactions has limited SET'S widespread acceptance. SET also 

25 requires special software for those merchants wishing to support SET transactions. 

Existing digital wallet technology, such as the digital wallet technology provided 
by, for example, GlobeSet, Inc., 1250 Capital of Texas Highway South, Building One, 
Suite 300, Austin, TX, 78746, provides a means for customers to utilize transaction 
card products (e.g., credit, charge, debit, smart cards, account numbers and the like) to 

30 pay for products and services on-line. In general, digital wallets are tools which store 
personal information (name, address, chargecard number, credit card number, etc.) in 
order to facilitate electronic commerce or other network interactions. The personal 
information can be stored on a general server or at a client location (PC or Smartcard) 
or on a hybrid of both a general server and a client server. The digital wallet general 
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METHODS AND APPARATUS FOR CONDUCTING ELECTRONIC TRANSACTIONS 

FIELD OF THE INVENTION 
The invention relates generally to methods and apparatus for conducting 
5 network transactions. More particularly, the invention relates to systems for 
authenticating and conducting business over data networks such as the Internet. 

BACKGROUND OF THE INVENTION 
In recent years, many consumers have discovered the convenience and 

1 0 economy of purchasing goods and services electronically. A number of channels for 
electronic purchases (commonly called "e-purchases") are available, including shop-at- 
home television networks, call-in responses to television advertisements, and the like. 
Most recently, direct purchasing via the Internet has'become extremely popular. 

In a typical Internet transaction, a consumer generally identifies goods and/or 

1 5 services for purchase by viewing an online advertisement such as a hypertext markup 
language (HTML) document provided via a World Wide Web (WWW) browser. 
Payment typically occurs via a charge card number that is provided via a secure 
channel such as a secure sockets layer (SSL) connection that is established between 
the consumer and the merchant. A charge card account number is typically a sixteen- 

20 digit credit card number. Credit card numbers typically comply with a standardized 
format having four spaced sets of numbers, as represented by the number "0000 0000 
0000 0000". The first five to seven digits are reserved for processing purposes and 
identify the issuing bank, card type, etc. The last sixteenth digit is used as a sum 
check for the sixteen-digit number. The intermediary eight-to-ten digits are used to 

25 uniquely identify the customer. The merchant then processes the charge card number 
by, for example, receiving direct authorization from the card issuer, then the merchant 
completes the transaction. The SSL standard is described by, for example, "The SSL 
Protocol Version 3.0" dated November 18, 1996 which is available online at 
http://home.netscape.com/eng/ssl3/draft302.txt, the entire contents of which are 

30 incorporated herein by reference. 

Although millions of transactions take place every day via the Internet, 
conventional SSL transactions often exhibit a number of marked disadvantages. 
Although SSL typically provides a secure end-to-end connection that prevents 
unscrupulous third parties from eavesdropping (e.g., "sniffing") or otherwise obtaining a 
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server is comprised of a Web server and a database server which centrally houses the 
customer's personal and credit card information, shopping preferences and profiles of 
on-line merchants. 

A digital wallet preferably performs functions such as single sign on/one 
5 password, automatic form filling of check out pages, one- or two-click purchasing, 
personalization of Websites, on-line order and delivery tracking, itemized electronic 
receipts, and customized offers and promotions based upon spending patterns and 
opt-ins. More particularly, a one-click purchase activates the wallet and confirms the 
purchase at the same time. A two-click check out first activates the wallet, then the 
1 0 second click confirms the purchase. 

In use, the wallet bookmark is typically clicked by the customer and an SSL 
session is established with the Wallet server. A browser plug-in is executed and the 
customer supplies an ID/password or smartcard for authentication in order to gain 
- access to the wallet data. When shopping at. an on-line merchant, the appropriate 
1 5 wallet data is transferred from the wallet server to the merchant's Web server. 

A new system of conducting electronic transactions is therefore desired. Such a 
system should provide improved security without additional overhead for customers 
and merchants. Moreover, such a new system should integrate well with various 
Internet wallets and other services provided by various vendors. 

20 

SUMMARY OF THE INVENTION 
In exemplary embodiments of the invention, a user is provided with an intelligent 
token, such as a smartcard, which can be used in conducting electronic transactions. 
The intelligent token contains a digital certificate and suitably authenticates with a 
25 server on the network that conducts all or portions of the transaction on behalf of the 
user. The user is a purchaser conducting a purchase transaction and the server is a 
wallet server that interacts with a security server to provide enhanced reliability and 

confidence in the transaction. 

Electronic transactions, such as purchase transactions, are conducted by: 
30 receiving a transaction request from a user at a server; issuing a challenge to the user; 
receiving a response from the user based upon the challenge; processing the 
response to verify a transaction instrument; assembling credentials which include at 
least one key for the electronic transaction; providing at least a portion of the 
credentials to the user; receiving a second request from the user which includes the 
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portion of the credentials; and validating the portion of the credentials with the key to 
provide access to a transaction service. 

Moreover, the present invention protects a network server from an attack by: 
restricting access to the network server to a portion of the network server for at least a 
5 selected protocol and scanning the portion of the network server for part.cular 
characters associated with the selected protocol. The particular characters may be 
removed or replaced with benign characters in order to reduce the security risk posed 
by the selected protocol. Preferably, the characters can be logged in order to form a 
security log. The security log can be reviewed to determine whether the part.cular 
1 0 characters are hostile. Alternatively, a request may be denied. 

The present invention also includes a transaction tool, such as a digital wallet 
used to perform purchase transactions, having an activator and a toolbar. Preferably, 
the toolbar allows a user to perform a small download of the activator and the toolbar 
utilizes one or more operating system controls, for example, a system tray .con. The 
1 5 transaction tool also includes a form fill component and an auto remember component 
for pre-filling forms with information previously provided by the user. 

BRIEF DESCRIPTION OF THE DRAWINGS 
The above and other features and advantages of the present invention are 
20 hereinafter described in the following detailed description of exemplary embodiments 
to be read in conjunction with the accompanying drawing figures, where.n l.ke 
reference numerals are used to identify the same or similar parts in the similar v.ews, 
and: 

Figures 1A-1C are block diagrams of various embodiments of an exemplary 

25 transaction system; 

Figure 2 is a block diagram of an exemplary purchaser system; 

Figure 3 is a block diagram of an exemplary security system; 

Figure 4 is a block diagram of an exemplary wallet server; 

Figures 5-8 are exemplary screen displays for an embodiment of a digital wallet 
30 formed in accordance with the present invention; 

Figure 9 is a flow diagram of an exemplary process executed by an exemplary 

activator application; 

Figure 10 is a message sequence chart of an exemplary login sequence; 
Figure 11 is a message sequence chart of an exemplary purchase sequence; 
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Figure 12A is a message sequence chart illustrating a potential security 
problem encountered with many scripting languages; 

Figure 12B is a message sequence chart of a correct communications flow 
without the security problems shown in Figure 12A; and 
5 Figure 13 is a flow diagram of an exemplary process for reducing or eliminating 

undesired executable code. 

DETAILED DESCRIPTION OF PREFERRED EXEMPLARY EMBODIMENTS 
The present invention may be described herein in terms of functional block 

10 components and various processing steps. It should be appreciated that such 
functional blocks may be realized by any number of hardware and/or software 
components configured to perform the specified functions. For example, the present 
invention may employ various integrated circuit (I.C.) components, e.g., memory 
elements, processing elements, logic elements, look-up tables, and the like, which may 

15 carry out a variety of functions under the control of one or more microprocessors or 
other control devices. Similarly, the software elements of the present invention may be 
implemented with any programming or scripting language such as C, C++, Java, 
COBOL, assembler, PERL, or the like, with the various algorithms being implemented 
with any combination of data structures, objects, processes, routines or other 

20 programming elements. Further, it should be noted that the present invention may 
employ any number of conventional techniques for data transmission, signaling, data 
processing, network control, and the like. Still further, the invention could be used to 
detect or prevent security issues with a scripting language, such as JavaScript, 
VBScript or the like. 

25 It should be appreciated that the particular implementations shown and 

described herein are illustrative of the invention and its best mode and are not 
intended to otherwise limit the scope of the present invention in any way. Indeed, for 
the sake of brevity, conventional data networking, application development and other 
functional aspects of the systems (and components of the individual operating 

30 components of the systems) may not be described in detail herein. Furthermore, the 
connecting lines shown in the various figures contained herein are intended to 
represent exemplary functional relationships and/or physical couplings between the 
various elements. It should be noted that many alternative or additional functional 
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relationships or physical connections may be present in a practical electronic 
transaction system. 

To simplify the description of the exemplary embodiments, the invention is 
frequently described as pertaining to a system of electronic commerce running over the 
5 Internet. It will be appreciated, however, that many applications of the present, 
invention could be formulated. For example, the system could be used to authenticate 
users of a computer system, or to activate a passcode system, or any other purpose. 
Similarly, the invention could be used in conjunction with any type of personal 
computer, network computer, workstation, minicomputer, mainframe, or the like 
10 running any operating system such as any version of Windows. Windows NT. 
W.ndows2000. Windows 98. Windows 95, MacOS. OS/2, BeOS, Linux, UNIX, or the 
like. Moreover, although the invention is frequently described herein as being 
implemented with TCP/IP communications protocols, it will be readily understood that 

• the invention could also be implemented using IPX, Appletalk, IP-6. NetBIOS. OSI or 

15 any number of existing or future protocols. 

Furthermore, the customer and merchant may represent individual people, 
entities, or business while the bank may represent other types of card issuing 
institutions, such as credit card companies, card sponsoring companies, or third party 
issuers under contract with financial institutions. The payment network includes 
20 existing proprietary networks that presently accommodate transactions for credit cards, 
debit cards, and other types of financial/banking cards. The payment network is a 
closed network that is assumed to be secure from eavesdroppers such as the 
American Express® network, VisaNet® network or Veriphone®. 

Additionally, other participants may be involved in some phases of the 
25 transaction, such as an intermediary settlement institution, but these participants are 
not shown. Each participant is equipped with a computing system to facilitate 
transactions. The customer has a personal computer, the merchant has a 
computer/server, and the bank has a main frame computer; however, any of the 
computers may be a mini-computer, a PC server, a network set of computers, laptops, 
30 notebooks, hand held computers, set-top boxes, and the like. 

Referring now to Figure 1A, a transaction system 100 suitably includes at least 
one user computer 110, a transaction authorizer computer 120, a security server 130 
and an optional transaction tool server 140. In various embodiments described in 
detail herein, the transaction system 100 is used in electronic commerce to conduct 
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purchase transactions. Specifically, the user computer 110 is a purchaser or customer 
computer, the transaction authorizer computer 120 is a merchant computer and the 
transaction tool server 140 is a digital wallet server. It will be appreciated that although 
the transaction system described herein is an electronic commerce system, the 
present invention is equally applicable to various other electronic transaction systems. 

The various computer systems and servers are interconnected as appropriate 
by a data network 102, which is any data network such as the Internet or another 
public data network. Other suitable networks 102 include the public switched 
telephone network (PSTN), corporate or university intranets, and the like. In various 
embodiments, such as the one shown in Figure 1B, merchant computer 120 is 
electronically coupled to security server 130 through a data connection 152 separate 
from network 102. Similarly, various embodiments include a connection 150 separate 
from network 102 connecting the wallet server 140 and security server. 130. 
Exemplary~data connections suitable for use with connections 150 and 152 include, 
telephone connections, ISDN connections, dedicated T1 or other data connections, 
wireless connections and the like. It will be appreciated that connection 150 and 
connection 152 may be identical connections, or each may be an entirely different form 
of connection in various embodiments of the invention. 

Various embodiments, such as the one shown in Figure 1C, also include an 
application server 160. In various embodiments, databases (not shown) and/or profile 
servers (not shown) may be connected to application server 160 and/or wallet 
server 140. Application server 160 can be used to balance the workload. Spreading 
the workload between digital wallet 140 and application server 160 can enhance 
efficiency and/or security. For example, application server 160 may perform some of 
the functionality performed by the Wallet server 140, such as database access. 
Because the application server 160 is not connected to the data network 102, security 
may be enhanced by having database access be performed by the application 
server 160 instead of the wallet server 140. 

While various exemplary embodiments have been illustrated in Figures 1A-1C, 
it will be appreciated that other embodiments are possible. For example, an 
embodiment may include connection 150 but not connection 152 or vice versa. 
Furthermore, components (e.g., customer 110, merchant 120, security server 130, 
wallet server 140 and application server 160) may be individual computers or 
networked groups of computers acting with similar purpose to fulfill the functions 
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described herein. Functionality attributed to a single component may be distributed 
among one or more individual computers in order to fulfill the described funct.onahty. 
For.example, the wallet server 140, may in fact be a collection of Web servers, 
application servers, database servers and other types of servers. 
5 To conduct a transaction, customer 110 suitably establishes a connection 

through network 102 with a merchant 120. When a purchase is to be consummated, 
customer 110 accesses wallet server 140. The customer 110 is then redirected to 
security server 130 to verify that a smartcard is in the customer's possession. The 
smartcard may include a digital certificate that uniquely identifies the card such that 
10 digital credentials relating to the transaction may be created, as described below. In 
various embodiments, portions of the digital credentials are returned to customer 110 
and a portion is provided to wallet server 140 via secure connection 150. Customer 
110 may then use the digital credentials to authenticate to a wallet server 140, wh.ch 
may complete the electronic transaction as a proxy for customer 110. Wallet server 
15 140 may include functionality for completing purchase forms affiliated with merchant 
computer 120, for example. When merchant 120 receives a secure purchase 
instrument identifier from customer 110 or from wallet server 140, card authorization 
may take place over connection 152 as with any ordinary charge card authorization. 
As described above, the communications can be performed using various protocols, 
20 for example SSL or VPN and the like. Because the smartcard contains identifying 
information that is unique to the particular card and which can be made known to the 
network through electronic means, a purchase transaction conducted with the 
smartcard is more secure than a transaction conducted with an ordinary charge or 
credit card. A lower discount rate may be justified for the secure transaction, wh.ch 
25 may be processed by the card issuer as a "Card Present" transaction. Additionally, if 
the transaction is a "Card Present" transaction, the risk of fraud may be transferred 
from the merchant to the card issuer. 

With reference now to Figure 2, an exemplary purchaser computer 110 (also 
referred to as a client, customer, or user computer) is any computer system that is 
30 capable of initiating an electronic purchase transaction on data network 102. In 
various embodiments, purchaser computer 110 is a personal computer running any 
operating system 212 such as any version of the Windows operating system ava.lable 
from the Microsoft Corporation of Redmond, Washington or any version of the MacOS 
operating system available from the Apple Corporation of Cupertino, California. 

8 
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Purchaser computer 110 suitably includes hardware and/or software to allow a 
smartcard 202 to interface with a Web browser 216 through operating system 212. 
Web browser 216 is any program compatible with purchaser computer 110 that 
communicates via network 102 such as Netscape Communicator available from the 
5 Netscape Corporation of Mountain View, California, Internet Explorer available from 
the Microsoft Corporation of Redmond, Washington, or the AOL Browser available 
from the America Online Corporation of Dulles, Virginia. In various embodiments, 
purchaser computer 110 includes a wallet client 214, which is any computer program 
configured to communicate with wallet server 140. An exemplary wallet client 214 is 
1 0 the Microsoft Wallet, or the Globeset Wallet available from the Globeset Corporation of 
Austin, Texas, although any wallet program could be used. 

Wallet client 214 and browser 216 may interact with smartcard 202 by sending 
data through operating system 212 to a card reader 204. Card reader 204 is any 
reader device capable of transferring information between wallet client 214 and 
15 smartcard 202. In various embodiments, card reader 204 is an ISO-7816 compatible 
reader such as the Model GCR410 available from the Gemplus Corporation of 
Redwood City, California, or any other suitable reader. 

Smartcard 202 is any card that is capable of conducting electronic transactions, 
such as any smartcard that is compatible with the following ISO standards, all 
20 incorporated herein by reference in their entirety: 

ISO/EC 7816-1:1998 Identification cards - Integrated circuit(s) cards 
with contacts — Part 1 : Physical characteristics; 

TSQ/IEC 7816-2:1999 Information technology - Identification cards — 
Integrated circuit(s) cards with contacts - Part 2: Dimensions and location 

25 of the contacts; 

TSQ/IEC 7816-3:1997 Information technology -- Identification cards - 
Integrated circuit(s) cards with contacts - Part 3: Electronic signals and 
transmission protocols; 

TSQ/IEC 7816-4:1995 Information technology - Identification cards - 
30 Integrated circuit(s) cards with contacts - Part 4: Interindustry commands 

for interchange; 

TSQ/TF.r. 7816-5:1994 Identification cards -- Integrated circuit(s) cards 
with contacts - Part 5: Numbering system and registration procedure for 
application identifiers; 
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Tgn/rer 78 16-6: 1996 Identification cards - Integrated circuit(s) cards 
with contacts - Part 6: Interindustry data elements; and 

TsrvrF.r.78 16-7: 1999 Identification cards -- Integrated circuit(s) cards 
with contacts - Part 7: Interindustry commands for Structured Card Query 

5 Language (SCQL). 

An exemplary smartcard 202 is a smartcard in accordance with the ISO 7816 
specifications including a model SLE66 chip available from the Infineon Corporation of 
Munich, Germany. The SLE66 chip includes a memory (such as a 16k memory, 
although more or less memory could be used) and a processor running, for example, 

1 0 the Multos operating system (such as Multos v.4). In various embodiments smartcard 
202 also includes an applet for storing and processing digital certificates or other 
cryptographic functions. For a basic introduction of cryptography, see "Applied 
Cryptography: Protocols, Algorthms, And Source Code In C," by Bruce Schneier and 
published by John Wiley &Sons (second edition, .1996), which is hereby incorporated 

1 5 by reference. For example, an X.509 Java applet could be included on smartcard 202 
for processing an X.509 certificate stored thereon. While the embodiments descnbed 
herein utilize a smartcard, it will be appreciated that other intelligent tokens, for 
example a global system for mobile communication (GSM) mobile phone, can be 
substituted for the smartcard in various embodiments of the invention. 

20 With reference now to Figure 3, a security server 130 suitably includes an 

interface to network 102, a security engine 304 and an authorization server 306 
communicating with a database 310. Network interface 302 is any program that 
facilitates communications on network 102, such as a Web server. In various 
embodiments, network interface 302 is based upon Netscape Enterprise Server, 

25 available from the Netscape Corporation of Mountain View, California. Network 
interface 302 receives electronic messages on network 102 and routes them to 
security engine 304 or authorization server 306 as appropriate. 

Security engine 304 and authorization server 306 may be separated by a 
firewall 308. Firewall 308 is any hardware or software control (such as a router access 

30 control) capable of restricting data flow between an internal and an external network 
(not shown). In various embodiments, security engine 304 suitably resides outside the 
firewall to administer data transfers between the security server 130 and the customer 
110 or wallet server 140. Authorization server 306 retains valuable confidential 
information such as database 310, which may contain a cross-reference of x.509 
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certificates stored on the various smartcards 202 associated with the system 100, so it 
may be suitably maintained on an internal network for enhanced security. It will be 
understood that the functionality of security engine 304 and authorization server 306 
may be suitably combined or separated in various ways without departing from the 

5 scope of the present invention. 

With reference now to Figure 4, an exemplary wallet server 140 includes a 
network interface 402, an optional applet server 404 and a wallet application 406. 
Network interface 402 is any program that facilitates communications on network 102, 
such as a Web server. In various embodiments, network interface 402 is based upon 

10 Netscape Enterprise Server, available from the Netscape Corporation of Mountain 
View, California. Optional applet server 404 provides server functionality for distributed 
programs such as Java programs or ActiveX controls. An exemplary applet server is 
the Java Applet Server available from Sun Microsystems of Mountain View, California. 
Applet server 404' and network interface 402 provide support functionality for wallet 

15 application 406, which may handle login functionality, retrieve wallet data from wallet 
database 408, and/or administer transactions as described herein. In various 
embodiments of the invention, wallet server 140 may include the SERVERWALLET 
(a.k.a. NETWALLET) program available from the Globeset Corporation of Austin, 
Texas. 

20 Various embodiments of the invention may include an activator application that 

suitably helps consumers with the wallet purchase process. The activator application 
may present status information, for example, or may actively launch the wallet client 
214 (Fig. 2) when appropriate. Additionally, the activator may maintain a local cache 
of sites supported by the wallet. 

25 The activator application program may be implemented as a conventional 

computer application. In various embodiments, the activator application displays 
information as a system tray icon, as a "floating bitmap", or in any other suitable 
manner. The graphical representations (e.g., icons) may indicate status information 
such as "browsing at a supported site", "browsing at a supported checkout page", 

30 "browsing at a supported payment page", "no browser windows open", "browsing at an 
unsupported page", and/or the like. 

A floating bitmap may be implemented with any graphical file or format, for 
example, a graphics interchange format (GIF) file. Alternate embodiments present 
information in graphical, audio, visual, audiovisual, multimedia, animated or other 
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formats Moreover, GIF files may be replaced with LZW files, TIFF files, animated GIF 
files, JPEG files, MPEG files, or any other sort of graphical, audio or mult.med.a format 
or file. 

Preferably, the present invention is enhanced by providing a transact.on tool 
with a window which includes controls which allow a user to more easily use the 
transaction tool. The transaction tool can be used for various electronic transactions. 
For example, purchase transactions, financial advisory transactions, .nsurance 
transactions, consumer-to-consumer transactions, such as barter transact.ons, 
transactions re.ating to offers and rewards, etc. The transaction too. described in deta.l 
herein is a digital wallet used for electronic purchase transactions. The d.g.tal wallet « 
enhanced by providing a window with controls for the customer to more easily use the 
wallet Preferably, the present invention includes a client-side implementat.on for 
accessing digital wallet functionality ("activator) and a server-side toolbar, that allows 
the user to perform a small download of the activator and utilize one or more control 
elements of the Operating System User Interface, for example, a Microsoft Windows 
system tray icon. 

The activator is object code that runs on the user's computer and conta.ns 
routines for accessing the wallet server. The activator can generate events and the 
activator contains procedural logic which allows for communication with the wallet 
server in response to specific user and system actions or events. Preferably, the 
activator presents a single graphical element, for example an icon which in a Microsoft 
Windows embodiment appears as a Windows system tray icon, and which enables the 
user to trigger the appearance of the wallet toolbar. In various embodiments, the 
wallet toolbar is, in effect, a special browser window that accesses the wallet server. 
The activator communicates with the wallet server to automate the update of the 
activator object code, via a small download. Preferably, the user is queried for a 
confirmation prior to performing the activator download. In various embodiments, the 
activator communicates with applications other than the wallet, for example, offers of 
rewards. 

The system provides the content of relevant options on each of its web pages, 
namely dynamic and contextual information that is specific to each page viewed by the 
user. This is accomplished by the activator monitoring URLs and potentially key.ng on 
pages so that the user can be made aware of potential opportunities. For example, the 
activator can check to see if the user is viewing a merchant site and present applicable 
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offers (e.g., discount on merchandise, etc.) to the user. The activator can also monitor 
versions of software on the user's system and inform the user of possible upgrade 
versions. In an exemplary embodiment, the system is implemented on any network, 
such as a WAN, LAN, Internet, or on any personal computer, wireless electronic device 
5 or any other similar device. The system can be implemented on an operating system, 
for example Microsoft Windows, Mac OS, Linux, Windows CE, Palm OS, and others. 

The activator, which is preferably implemented on the client side, allows the 
user 110 to be in constant or intermittent communication with the digital wallet 140 
issuer, for example, American Express, without having to have intrusive windows 

10 taking up space on the user's display. As described above, this allows the wallet 
issuer to monitor and present possible items of interest to the user at appropriate 
times. The configurable controls presented in the window allow the customer to 
quickly navigate to desired Web sites, and to immediately invoke desired functionality 
such as digital shopping cart checkout. Preferably, the client toolbar may be a discrete 

1 5 window that associates with the user's browser window, and maintains a geometry that 
effectively renders it a part of the user's browser. Although when the user clicks on its 
controls, the window remains in its original state, namely the window directs the 
browser window to visit desired URLs and invoke specific actions (such as, use of the 
digital wallet). For example, after selecting a digital wallet icon from the system tray, 

20 the digital wallet toolbar 502 is displayed as a discrete window that is associated with 
the user's browser window 500 as shown in Figure 5. In an alternative embodiment, 
the client toolbar frames the existing wallet window, providing the additional controls as 
described above in an extension of the window area which is provided by an existing 
wallet. In another alternative embodiment, the area is divided in the user's standard 

25 browser window to create an area that can be used for wallet and the other controls 
described above. 

The system preferably provides a convenient way for customers to not only visit 
favorite URLs, but also to invoke specific functionality that might otherwise incur many 
steps, and which might change as the vendors' sites are continually updated. The 
30 system also preferably provides a simpler user experience by making the wallet and 
e-commerce sites not only easy to use, but by making the wallet and client toolbar 
easy to find. When a user has many different windows open, finding the wallet window 
can be difficult and annoying, especially as different browser windows seize GUI focus 
during the course of normal navigation and interaction with sites. As such, use of the 
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system tray icon and server side functionality provides a superior user experience. In 
a preferred embodiment, the present system works with any known in the art browser, 

such as Netscape Navigator. 

While prior art systems may simply provide a customizable portal (e.g.. 
MyAmericanExpress.com) that allows a user to visit the page and then traverse links 
from that page, an exemplary embodiment of the present invention suitably provides a 
window with controls that will stay on the users" desktop as they navigate throughout 
the Web. Additionally, the client toolbar provides a means of automating actions for 
the user, where these actions take place on third party e-commerce sites. Moreover, 
prior art systems may utilize a separate browser window to render the wallet controls, 
but the present invention utilizes a standard browser window which has been divided 
to provide an area for the wallet to occupy. For example, in a preferred embodiment, a 
digital wallet icon is available to the user as a system tray icon (not shown). Upon 
invocation of the digital wallet icon, the digital wallet toolbar 502 is displayed as shown 
in Figure 5. The digital wallet toolbar is unobtrusive while including controls which 
allow the user to utilize the digital wallet. Preferably, the toolbar 502 is associated with 

the browser window 500. 

As shown in Figure 6, if the user selects a shopping directory button from the 
toolbar 502, the toolbar expands to a shopping directory page 602. The user can 
select a merchant from the list of merchants 604 displayed in the shopping directory 
page 602. Upon selecting a merchant from the list of merchants 604, the digital wallet 
takes the user to the selected merchant site 702, such as is shown in Figure 7. 
Preferably, when the digital wallet takes a user to a merchant site 702, the toolbar 502 

returns to its normal size. 

When the user makes a purchase from a merchant, for example by placing 
items in a shopping cart and proceeding to checkout at the merchant's site, the 
checkout function is performed, in part, by the digital wallet of the present invention. 
As shown in Figure 8, when the user indicates a desired purchase at a merchant 
site 702, the checkout user interface 802 of the digital wallet is displayed. For 
example, the checkout display 802 appears in one side of the browser window, while 
the merchant window 702 is still displayed on the opposite side of the browser window. 
Much of the information that a user would normally have to enter at the merchant 
checkout (for example, name, address, e-mail address, credit card information, etc.) is 
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already known by the digital wallet and is pre-filled in the digital wallet checkout 
window 802. In a preferred embodiment, the user can edit the pre-filled information. 

Preferably, the present system also includes methods and apparatus that 
facilitate the reliable population of HTML forms on Web sites. The end result is that 
users can identify information content that they wish to provide to sites in a general 
manner, independent of the actual appearance, labeling, and behaviors of various 
e-commerce Web sites. Preferably, the present invention includes an "auto- 
remember" component that allows a user to capture data that is entered and a "form 
fill" component which includes a powerful set of processes that results from the 
combination of several different models of sites and users. 

The present invention collects information from users, storing it securely and 
reliably on a server, and then provides it to appropriate form fields under the user's 
direction. The system maintains mappings of user information to the various HTML 
form fields of sites that are of interest to the user. This information can then direct how 
HTML forms are to be filled (or pre-filled) for users who wish to interact with those 
sites. 

With respect to the "auto-remember" feature, prior art digital wallets may 
implement a remember function, but it must be initiated by the user. With the present 
"auto-remember" feature, digital wallet users do not need to click a button to remember 
the form they just filled out because the present system remembers the fields that the 
user is submitting on a merchant window. When a form is submitted (for example, by 
pressing a "Submit" button or a "Buy" button), the online wallet responds by 
determining if the window that triggered the form submission is a merchant window of 
interest. If so, the wallet suitably remembers the data; otherwise, the wallet can 
disregard the occurrence of the form submission and continue to run as normal. 
The digital wallet controls may include a button labeled "remember, or may also 
support an automatic remember feature that is always active. In general, fields other 
than those that are automatically populated by the wallet can be remembered. In this 
context, remembering a field means that when a user enters data into a specific field, 
the value will be stored by the system. The wallet component will detect field values 
entered in this way, and will securely transmit them to a server via the Internet. When 
a user next goes to this page, the wallet, in addition to populating the form with fields 
that are retrieved from the wallet system, will also populate the form with values that 
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had previously been remembered. When processing the form (pro-fill), the wallet will 
securely retrieve field values from the server. 

More particularly, with respect to the Internet Explorer browser, the invention 
suitably implements an ActiveX control that attaches itself to a Web page such as, for 
example, the American Express Online Wallet. In a preferred embodiment, the 
ActiveX control contains a method that captures the browser events of all Internet 
Explorer browsers, so that the American Express Online Wallet can respond to these 
events if necessary by a JavaScript function loaded within the American Express 
Online Wallet, thereby allowing the system to obtain the completely downloaded 
document within an Internet Explorer browser. Specifically, this allows the system to 
capture the "Document Complete" event raised by the Internet Explorer browser which 
specifies when a document has finished loading. When this event is captured, the 
ctiveX control notifies the American Express Online Wallet by calling a JavaScript 
functionjoaded within the American Express Online Wallet. This function responds to 
this event by suitably communicating with the ActiveX control to capture the "Form 
Submit" events for all forms on all Internet Explorer browsers. 

When a user fills a form on a Web page and clicks the "Submit" (i.e., any 
control, such as a button, that submits a form) button for that page, the American 
Express Online Wallet is notified by the ActiveX control calling a JavaScript function 
loaded within the American Express Online Wallet. The American Express Online 
Wallet then suitably determines if the document raising the "Submit" event is of interest 
by checking the URL of the window that raised the event. If the event is to be handled, 
the American Express Online Wallet must call a suitable function within the ActiveX 
control that obtains the document object model (DOM) that raised the event. The DOM 
can then be traversed and the form values can be saved so that they can be sent to 
the server for storage in memory. In a preferred embodiment, the ActiveX control must 
properly detach itself from capturing the browser events and form "Submit" events so 
that runtime errors are minimized. 

With respect to the Netscape browser, because of Netscape's implementation of 
events, the system captures the event from within JavaScript alone. If the system 
successfully obtains the "Universal Browser Write" privilege (i.e. granted by the user), 
the system can then successfully call a function that allows an external window to 
capture events of another window. The system then can traverse the document object 
model for all frames of that window. When doing so, the system notifies each form of 
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the window that the system wants to capture the "Submit" event. As such, when a 
user fills a form on the window that the system notified and clicks the "Submit" button 
(i.e., any control, such as a button, that submits a form) for that page, the online wallet 
is notified and suitably responds. One skilled in the art will appreciate that the present 
invention may be implemented in any suitable transaction system, including, but not 
limited to any suitable digital wallet system. 

With respect to the form fill function, the digital wallet, such as, for example, the 
American Express Online Wallet, provides a form fill functionality to aid users in 
populating forms. Prior art systems, such as the system provided by GlobeSet, Inc., 
typically use a Browser Helper Object (BHO). The BHO approach often includes 
disadvantages such as, for example, the Internet Explorer 5.0 browser has a bug 
where it will only load the first BHO specified in the registry. This is a problem for any 
application since it can't be sure whether its BHO is loaded or not. Moreover, a BHO is 
loaded for each instance of Internet Explorer such that multiple instances of a BHO 
could be running at any given time - therefore eating up memory and slowing down 
navigation for all browsers versus only the one of interest. 

The present invention preferably replaces the BHO solution by using the same 
ActiveX control as specified in the "auto remember" feature. By attaching an ActiveX 
control to the Online Wallet Web page, the system suitably obtains the document 
object model for any document loaded within any given Internet Explorer browser by 
using, for example, the Shell Windows API. When a user clicks a "Fill Form" button on 
the Online Wallet, the wallet can respond by first obtaining the document object model 
through the ActiveX control. Next, the wallet can save the names of the fields that 
make up forms and send them to a heuristic engine on the server. The server will 
respond to this request by returning the values that should be used to fill these fields. 
The fields can then be filled using the same document object model obtained earlier. 
As such, the present invention reduces the problem of having to enter repetitive data in 
forms at Web sites. In addition to saving effort on part of customers, it increases 

accuracy of the entered data. 

More particularly, the architecture of the present invention combines a 
server-side model of each site (e.g., fields, pages, links, etc.), server-side model of 
user (e.g., profile), user generated model of site (e.g., macro recording, tagging, drag 
and drop) model of site manually generated by system (e.g., to augment and validate 
the user generated models), and heuristically generated model of site (e.g., inference 
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of semantic information about fields, actions, etc.). The present system creates and 
stores several distinct types of models. The first characterizes the site, for example, 
how do you check out, how do you add something to a shopping cart, how do you 
search for a type of product, how do you enter preferences (e.g., travel), etc. The 
second model characterizes the user, for example, what are the things that a user can 
do and what are the profile attributes of a user. By combining these two models, the 
present system creates special processes that add great flexibility and power. The 
system maps from the model of what a user can do, to the model of the site, where.n 
the site models are generated by any known method. As such, the site model can be 
created by the user, by the host, by the transaction card company (issuer) or even by 
the site provider. In a preferred embodiment, ECML/XML can be used to represent 
models for the site. In various embodiments site models can be exchanged with other 
systems. 

For. example, a user may routinely visit sites of different airlines and travel 
services in order to purchase airline tickets. Each site typically has fields on different 
screens for collecting information that are relatively similar between the various sites. 
However each site will use different HTML form fields that are placed on different 
URLs and which may also change over time. Even though the information is very 
similar in nature across the different sites, there is presently no common mechan.sm to 
automate the process of populating fields for user travel preferences (e.g., seating, 
meals, travel times, affinity rewards, etc.). Each site may have its own profile of the 
user which stores much of this information. However, the user would still need to 
create such a profile for each site independently, given the current practice. 

The present invention includes heuristics based field recognition. In this 
approach, field labels are identified by their spatial proximity to form fields of interest. 
A combination of field labels and form field HTML attributes (most notably the "name- 
attribute of the HTML "input", "select", and "action" elements) will be used as input to a 
heuristic engine that contains a dictionary to aid the identification of desired fields. 

In another embodiment, the present invention includes user mediated field 
recognition. In this approach, the user willfully captures input via a "Remember" button 
or similar control that allows servers to capture information about the sequence of 
actions the user executes. When the user does this, he or she can effectively "play 
back" the actions (similar to macro scripting employed in other software systems). As 
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such, the user's actions can be fed into the heuristic engine and also be fed directly 
into field mapping tables that are used by the processes of this engine. 

In a preferred embodiment, the above two approaches may need some manual 
interaction in order to completely create process maps and form field maps that 
accurately depict the navigation and form field completion possibilities that enable th.s 
invention. When necessary, human analysts will operate in a fashion similar to what 
occurs during user mediated field recognition, although they will provide far more 
information about their navigation and form filling processes than would the typical 
user. In all cases, the information that is gathered is used to create a process map (or 
detailed site map) that depicts the sequence of actions (form fill, HTTP Post, HTTP 
Get, etc.) by which various activities can occur. A field map will also be generated for 
each of the Web pages in the process map, wherein the field map defines the precise 
names of fields that can be used to automate form submission. State maps may also 
be required to track the states of users as they interact with the Web site (the state of 
the user, such as logged on vs. not logged on, will modify the results of specific 
actions on the site). 

In a preferred embodiment, the process by which the user interacts can either 
be fully automated (in which case the user merely conveys the desire to perform a 
scripted action) or can be user mediated (in which case the invention can pre-fill form 
fields for the user, thereby affording the user the opportunity to correct, change, or 
complete any fields that require further data entry). In addition to the products and 
services described above, the enabling technology in the form of the process and field 
maps can be leveraged for new products and services, such as enabling companies to 
automate the entry of form data for their site visitors. For example, if a company 
compiled process and field maps for the benefit of their own customers (by any of the 
means described above), then the company can also license this information, services, 
and products to third party customers. The sites for which these maps exist may also 
use the present invention such that the sites benefit by delivering a similar service to 
their customers who are not benefiting from the system. The underlying processes 
themselves will also rely on a system which acquires this information and reformats it, 
for example, as XML and ECML. These standard representations would form the 
basis of information exchange for the latter two products/services. 

With reference now to Figure 9, a process 900 implemented by an exemplary 
activator program suitably includes initializing the application (step 902), monitoring the 
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uniform resource locator (URL) as the user browses or shops online (step 904). 
determining whether the user is browsing at a supported site (step 906), determ.n.ng 
the type of supported site (steps 908 and 912) and responding appropriately at 
processing steps 910 and 914 (respectively). Other features (such as coupons, 
5 special offers, monitoring, security and the like) may be implemented at step 916. 

initialization step 902 suitably involves opening the activator applicat.cn and 
initializing the application as appropriate. The activator application may be initialized in 
response to system startup, connection to a network (such as the internet or a LAN), or 
initialization of a browser (such as Internet Explorer, available from the Microsoft 
10 Corporation of Redmond, Washington or Netscape Explorer, available from the 
Netscape Corporation of Mountain View, California). In various embodiments, the 
activator application may contact the wallet server 140 (Figure 1), wallet application 
406 (Figure 4) or another server on network 102. The activator application suitably 
contacts- the remote server to obtain information such as a list of Web sites, doma.n 
1 5 names, or URLs that are supported by the wallet. This information may be obtained on 
a regular basis (e.g. daily, weekly, monthly, or at each initialization of the agent 
application) or when polled by the activator application or the server. In various 
embodiments, the activator application stores the list of supported URLs in a cache or 
file on a local drive, or in memory on the client computer. 
20 As the user browses the Internet or other data network 102, the activator 

application suitably monitors the location of the user on the network. One method of 
monitoring the user's browsing is to monitor the URL used by the user's browser. In 
such embodiments, the activator application obtains the present URL from the users- 
browser (or from the system network interface, as appropriate) and compares (step 
25 906) the present URL against the list of supported URLs obtained from the remote 
server in initialization step 902. These comparisons are shown in logically separate 
steps 906, 908, 912 and 916 in Figure 9, although these steps could be combined or 
separated in any fashion without departing from the ambit of the invention. For 
example, although Figure 9 shows multiple comparisons being executed, a single 
30 comparison of each present URL against the list of supported URLs may be sufficient 

in certain embodiments. 

If the present URL corresponds to a supported URL. the activator application 
responds appropriately. For example, if the present URL is a supported checkout 
page (yes in step 908), the activator application executes a checkout process (step 
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910). The checkout process may include notifying the user that the checkout page is 
supported through a pop-up message, or by displaying a particular icon in the system 
tray or in the floating window. If the wallet client application 214 is not already open, 
the activator application may present a dialog box or other prompt to the user 
5 indicating that the page is supported by the wallet application 214. The prompt may 
also provide a button or other mechanism by which the user may open the wallet 
application 214. 

If the present URL corresponds to a supported payment page (yes in step 912), 
the activator application may provide payment instructions to the wallet application, or 

10 otherwise pass control to the wallet application (step 914). Messages sent between 
the activator application, the wallet application, the browser, and the like may be sent 
by Open Desktop messages, Object Linking and Embedding (OLE) messages, object 
routine calls, OS calls, or the like. 

In various embodiments, the functionality described above is accomplished 

15 using cookies as described next. Cookies are used to detect a valid user context. If a 
valid user context is detected, the activator will either: launch a server application or 
launch a server toolbar that enables the user to launch other applications. For 
example, a user's browser might have several cookies that signify the ability to 
purchase via either a private payment or a specific card product. The activator may 

20 launch a toolbar that allows the user to select a desired payment instrument (e.g., from 
private payments or a card in the user's digital wallet). It will be appreciated that the 
available applications are not all necessarily related to a purchase transaction. In 
various embodiments, the context information is stored both on a server and in cookies 
associated with the browser. For example, the cookies might act as a key by which the 

25 context information can be retrieved from the server. 

Other functionality (step 916) may also be incorporated into the activator 
application. For example, security mechanisms (such as those described above and 
below), customer monitoring functions, coupons, special offers and the like could be 
implemented. In the case of coupons or special offers, the activator could sense the 

30 present URL as corresponding to a particular product or Web page. When the user 
"surfs" or browses to the particular supported URL, the activator application notices the 
match and presents the user (via a dialog window, or via the browser, or the like) with 
a special offer, such as an opportunity to purchase a particular product or to receive a 
special discount on a purchase. It will be appreciated that other functionality could be 
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incorporated into the activator applicat without departing from the ambit of the 
present application. 

In various embodiments of the invention, wallet client 214 (Figure 2) is pre-f.lled 
with information that is specific to the particular user/customer. With reference to 

5 Figure 1, a user may apply for a digital wallet by contacting a Web server such as 
wallet server 140 on network 102. The user completes a registration form (which may 
be generated with CGI scripts, for example) to apply for the wallet. Wallet server 140 
suitably receives demographic, account and other information (e.g. address, shipping 
address, name, credit card number, and the like) from authentication server 306 

10 (Figure 3) or another server on a private network. This information may be used to 
configure a wallet client 214 (Figure 2) that is unique to the particular user. One 
method of configuring the wallet client 214 is to create a configuration file that is 
; associated with client 214 and that is read by client 214 to obtain wallet informat.on as 
described above. 

15 Preferably, the registration information also includes card reader information 

which includes whether the card reader port should be serial or USB port. If the wallet 
application is approved, a card reader may be shipped or otherwise provided to the 
user, and a special code (such as a cryptographic key, or a password, or any other sort 
of electronic or printed code) is also provided to the user. The user then registers for 

20 online wallet service by electronically contacting wallet server 140 and authenticating 
to the server with the card and/or with the special code. After providing the special 
code, the user receives a specially configured copy of the wallet software, which may 
be installed on customer computer 110, as appropriate. The wallet pre-fill procedure 
may be used with any credit card or charge card by simply associating a version of the 

25 wallet program with a special code. Configuration information for a particular user is 
associated with a code that is provided to the user, who may later present the special 
code to authenticate him/herself with wallet server 140 to obtain a copy of the wallet 
that has already been pre-configured with data specific to the particular user. 

With primary reference now to Figures 1 and 10, customer 110 suitably initiates 

30 a transaction by logging in to wallet server 140 using smartcard 202. To log in to the 
wallet server 140, customer 110 first may connect to the security server 130 via 
browser 216. The user selects a particular uniform resource locator (URL) for the login 
page through a bookmark, an internet shortcut, a hyperlink, or any other suitable 
technique. Security server 130 may then return a login page via network interface 302. 
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In various embodiments, a form entry and submission button for user/password login 
and a hypertext link for smartcard login are provided as part of the login page. The 
user selects smartcard login, and browser 216 suitably responds by forwarding log on 
request message 1002 (Figure 10). Security server 130 receives logon request 1002 
and initiates the smartcard logon process as appropriate. In various embodiments, 
security server 130 formats a cryptographic challenge by authorization server 306 or 
security engine 304 in response to logon request message 1002. Cryptographic 
challenge 1004 is any sort of challenge message that prevents replay attacks (e.g., 
fraudulent messages created by re-sending previously sent authentication packets), 
such as a challenge that is based upon random data and is designed to solicit a 
response from the X.509 application stored on smartcard 202. The challenge is then 
suitably provided to customer 1 1 0 via network 1 02 as challenge message 1 004. 

Upon receipt of challenge message 1004, browser 216 suitably passes 
message 1004 to wallet client 214 for processing with smartcard 202. If wallet client 
214 is not running, browser 216 may automatically open the program. Wallet client 
214 then prepares the signature response, as appropriate. For example, wallet client 
214 may extract the server challenge information, format a new client challenge (i.e., a 
second cryptographic challenge for smartcard 202), combine both challenges into a 
dual challenge, and compute a hash of the dual challenge for later use, for example, in 
a Public-Key Cryptography System 1 (PKCS1) cryptographic block. The hash may be 
computed according to any algorithm such as MD3 or MD4, for example, and is 
suitably used to guarantee the completeness and accuracy of the data in the dual 
challenge block. It will be understood that PKCS1 is a public key cryptography 
standard defining mechanisms for encrypting and signing data using RSA public-key 
cryptosystems. The PKCS standard is fully defined in PKPS #1- RSA Cryptography 
S ^ic^tions Version 2.0 dated September 1998 (available online from 
http://www.rsa.com/rsalabs/pubs/PKCS/html/pkcs-1.html) and incorporated herein by 

referenced in its entirety. 

The PKCS1 block is suitably provided to smartcard 202 via reader 204 for 
processing (step 1006 in Figure 10). In various embodiments, card reader 204 
interacts with customer computer 110 to prompt the user for a personal identifier, for 
example a personal identification number (PIN) or other unique identifier, to access the 
card. In a preferred embodiment, a PIN is stored on smartcard 202. Alternatively, a 
PIN or other personal identifier may be stored elsewhere on the system, for example, 
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on the reader 204 or .he customer computer 110. The user suitably enters the 
or aHdeler as approve to unlocK smartcard 202. which receives the du 
* Tonga bicck Irom walie, ciian, 214 and digit* signs the blocK as 
^embodiments, smartcard 202 contains a private k ey .ha, is used to con , u,e 
digita, signature o, .he bioc*. The signed bloc* is then returned to waiiet ^ 
y -*^rw on? a\<in orovides a certificate (sucn 

appropriate. In various embodiments, smartcard 202 also provide 

as an X.509 certiftcate, that corresponds to the private Key used to compute the d,g,a, 

After receiving the signature and certificate from smarlcard 202, walle. den, 
21 4 5 uL» create'an approve response message 1008 to be sent to secur 

s 30. .though response message 1008 ^^X^ 

embodiments format response message 1008 as a PKCt»r me a 

L™«r. CMjaaae hj -~ &m< Standard Ap RSA LabgrajonesTe^nioaJ 

Z 15. Revis ed November 1, 1993, availab^ online from 

^^^^^^ and incorporated herein by reference ,n „s 

en " re,y After receiving response message 1008. security server 130 processes me 
Alter receiving „ embodiments, response 

message as appropriate (step 1010 ,n , he and 

messaoe 1008 is routed to authonzation server 306. whicn venues 
message louts is r successful verification of the certification 

signature provided by smartcard 202. Upon success. 

and va.ida.ion o, ,he signa,ure. in various embodiment a secur,«y .oKen may 
generated and returned lo the customer 1 10 or smartcard 202. 

,n .his manner, subseguen. presen.a.ion of .he Security toKen provi e a mean 
,or the user to establish identfty and secureiy interact with .he w*t Jn J 
; embodiments, authorization server 306 may also create an addition ^ 

,ha, IdenfHies .he user, .n various embodiments mis toKen may cons,^ of mu^e 
portions which can then map to an appropriate digital c«rt,f,ca.e smart art - 

• r» a t=»h^P 310 In various embodiments, the additional 

Hats Dossiblv uti zng data in database oiu. hi v<a..w« 

et'ril ot and,or portions .herein may be provided to customer 110 in conjunction 
0 m message 1012. In various embod.ments, the addKiona, security .Cen may 
be provided to the customer or maintained on authorization server 306. 

Upon receipt of redireo. message 1012, customer 110 suitably contacts wade, 
server 140 ,o rogues, a connection, tn various embodiments "Redoes, conned 
Z ge 1014 sulbly includes the security toKen and possibly the additional security 



24 



8NSDOCID: <WO 0116900A2_I_> 



WO 01/16900 PCT/USOO/23817 



token in entirety or part as part of redirect message 1012. Wallet server 140 queries 
the security server 130 using some combination of security tokens in whole or part to 
obtain identification of customer 110. The query 1016 and response 1018 are suitably 
transmitted across network 150, which in some embodiments is maintained separate 
5 from network 102 to enhance the security of the system 100. An alternative 
embodiment employs network 102 that in some embodiments affords enhanced 
security by Virtual Private Network, SSL protocol, use of shared secrets, and/or other 
cryptographic means. If the return credentials 1018 are in order, wallet server 140 
retrieves the attributes corresponding to customer 110 from wallet database 408 and 
10 notifies customer 110 of a successful login via message 1020. It will be appreciated 
that alternate embodiments of a logon sequence are possible. It will also be 
appreciated that any sort of encryption schemes, message formats and the like could 
be used to implement a login sequence 1000. 

Referring now to Figure 11, an exemplary authentication flow .1 100 suitable, for 
15 use during a purchase transaction begins with a customer 1 1 0 placing a request 1 1 02 
with wallet server 140 for an event (such as a purchase) for which authentication is 
required. Wallet server 140 suitably recognizes the event and submits a request 
message 1104 to the security server 130, for example, via communication channel 
150, to format a challenge message. Authentication server 306 (or some other 
20 component of security server 130, as appropriate) then formats a challenge message 
1106 (which may include random data) and provides the challenge message 1106 to 
wallet server 140, for example, via connection 150. Wallet server 140 receives the 
challenge message 1106 and forwards the challenge data to browser 216 as signature 
request message 1108. Browser 216 opens wallet client 214, if necessary, and 
25 forwards signature request message 1108. As described above, wallet client 214 
formats a signature request block such as a PKCS1 block including a server challenge, 
a client challenge and a hash. The resultant signature request block is provided to 
smartcard 202 via reader 204. Smartcard 202 suitably signs the block and provides a 
copy of its X.509 certificate, as appropriate. 
30 The signed block may then be returned to wallet client 214, which suitably 

formats an appropriate signature response message 1110 (such as a PKCS7 
message) and sends it to wallet server 140. Wallet server 140 then formulates validity 
check message 1112, which includes data from signature response message 1110 
and the security token associated with customer 110 during the logon process (such 



25 



BNSDOCID: <WO 0116900A2_I_> 



WO 01/16900 PCTAJSOO/23817 

as the exemplary logon process shown in Figure 10). In alternate embodiments, the 
security token provided is received from customer 110 as part of signature response 
message 1110. Validity check message 1112 is sent to security server 130 via 
connection 150. as appropriate. Security server 130 may then route validity check 

5 message to authorization server 306, as appropriate, which may check the signature 
and retrieve the appropriate security token from database 310 (step 1114 in 
Figure 11). The security token and/or optional unique identification code retrieved 
from the database is then compared to the security token or ID received from the wallet 
server 140. If the two objects (e.g., security tokens or IDs) match, it can be deduced 

10 that the card presently used by customer 1 10 is the same card used by customer 110 
at the time of log on. An appropriate approve or reject message 1 1 16 is then sent from 
security server 130 to wallet server 140, and the transaction is allowed to proceed. 

In various embodiments, wallet server 140 acts as a proxy for customer 110 
during transactions. For example, wajlet. server 140 may complete purchase forms 

15 including shipping address, card number, and the like on behalf of purchaser 110. 
Merchant 120 may then authorize the purchase transaction as a standard charge card 
transaction using conventional hardware and software. It will be realized, however, 
that the added security provided by the systems disclosed herein will allow added 
confidence in the identity of the purchaser, thus justifying a lower discount rate for the 

20 transaction. 

Various embodiments of the invention incorporate an added protection against 
security breaches. Because many server-side functions incorporated into security 
server 130 or wallet server 140, for example, may incorporate various scripting 
components written in scripting languages such as JavaScript (as defined by Sun 

25 Microsystems of Mountain View, California) or VBscript (as defined by the Microsoft 
Corporation of Redmond, Washington), servers coupled to network 102 may provide 
various functionality to the multiple clients 110 through such server languages by 
providing scripts (or code) from the server to the client. The code is interpreted, 
compiled or otherwise executed by client computer 110. In embodiments incorporating 

30 JavaScript, for example, scripts are interpreted and executed by a browser program 
(e.g. Internet Explorer, Netscape Communicator or the like) running on client computer 
110. Other embodiments include other non-PC browsers, for example Wireless 
Application Protocol (WAP) phones that support Wireless Markup Language(WML) 
scripts. The various scripting languages may contain instructions, objects or other data 
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mechanisms for accessing files on the user's hard drive, for example, or for otherwise 
manipulating data on the user's computer. To prevent unauthorized sources from 
providing executable code to the user, the scripting languages may include a 
mechanism for allowing the user to approve scripts provided only from trusted sources. 
For example, a user conducting an electronic transaction as described above may 
allow scripts provided from the wallet server to execute, but may prevent other scripts 
provided by other sources from executing on the user's computer. 

A potential security problem encountered with many scripting languages is 
shown in Figure 12A. An unscrupulous "cracker" may create a Web site 1204 that is 
designed to perform malicious activities against users of a legitimate Web server 1206. 
The cracker site 1204 (shown as the "criminal site" in the figure) may, for example, 
provide a portion of code, such as a script, to the user. The criminal site 1204 may 
also induce the user's Web browser 216 to request a particular uniform resource 
locator (URL) at the legitimate server 1206 (such as the wallet server 140; or any other 
server on network 102). The referenced URL may be deliberately crafted such that the 
legitimate server 1206, returns, for example, an error message or other response to 
the client browser 216. In various embodiments, the response from the legitimate 
server 1206 may automatically include a portion or variation of the request from the 
user's Web browser 216. If that response includes JavaScript, VBscript or other code 
generated as a result of the malicious intent of the criminal site 1204, then the code 
may be executed on the user's computer. This example illustrates one of many 
techniques in which a "cracker" may induce a legitimate Web server 1206 to send 
malicious instructions to a user's Web browser 216. Because the various coding and 
scripting languages contain instructions for accessing the host computer's file system, 
registry, or the like, it will be understood that the unauthorized execution of such code 
is highly undesirable. Nevertheless, the technique shown in Figure 12A may allow 
scripting or other code from a criminal site 1204 to be provided to a user's computer. 
Because the users' computer thinks that the scripting came from a trusted source (i.e. 
the wallet server), the client's computer may execute the code from the criminal site, 
thus creating the potential for damage, unauthorized data dissemination or destruction, 
or the like. Figure 12B illustrates the correct communication flow that should occur (as 
opposed to the criminal attack flow shown in Figure 12A). 

To prevent this potential security problem, various embodiments of the invention 
suitably include techniques for reducing or eliminating undesired executable code. 
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With reference to Figure 13, a process 1300 for reducing the likelihood of script 
attacks suitably includes the steps of limiting the portions of the server having elevated 
permission (step 1302), removing dangerous characters within that portion of the site 
(step 1304), encoding certain characters where necessary (step 1306), and optionally 
5 logging data that is provided to users from the relevant portion of the Web site (step 
1308). 

With regard to step 1302, a Web site typically includes various pages, each 
page having a unique URL. Users of the site may place elevated trust in certain 
servers (such as those corresponding to financial institutions or merchants who are 

10 reputable). By restricting the elevated trust to only a portion of the Web site (e.g., a 
limited subset of URLs corresponding to the trusted Web site), the level of trust 
afforded to the rest of the site is suitably reduced and security is enhanced. Trust may 
be restricted to a limited portion of the site by configuring the user's Web browser to 
trusf only a portion of the site, for example. The user's. Web browser may be 

15 configured manually or by a configuration script provided by a wallet server, for 
example. When only certain pages (e.g. a portion) of the Web site are enabled with 
heightened trust, any scripts included in references to other pages will either not be 
executed or will not be executed with heightened trust. 

In addition to (or as an alternative to) configuring the client such that the client 

20 only "trusts" a certain portion of the server, the server may be configured to improve 
the security of the client-server interaction. For example, scripting with heightened 
trust may be disallowed on most of the server to improve security. Moreover, data 
provided to the trusted portion of the Web site may be monitored and/or modified 
before being returned to the user (steps 1304 and 1306). Most scripting languages 

25 require certain characters for formatting commands. For example, the JavaScript 
language is frequently encoded with script instructions placed between angle brackets 
("<" and ">"). Hence, the angle brackets may be removed from any content that will be 
returned by a trusted portion of the Web site. If a Web page provided from a trusted 
portion of the Web site were to include a "criminal" JavaScript program attempting to 

30 use angle brackets, for example, the script instructions would not execute on the user's 
computer because the script instructions would not be properly formatted after 
removing the angle brackets. Alternatively, certain "dangerous" characters (such as 
the angle brackets in JavaScript) may be returned in an alternate format, for example, 
in "ampersand notation" with an ampersand ("&") and an American Standard Code for 

28 



BNSDOCID: <WO 0116900A2_L> 



WO 01/16900 



PCTAJSOO/23817 



Information Interchange (ASCII) value for the particular character, or by replacing the 
"dangerous" character with a safe character, such as the "space" character (step 
1306). It will be appreciated that any characters could be eliminated or encoded in 
various embodiments of the invention depending upon the particular languages, 
scripting environments, and the like that may be utilized. 

In various embodiments, an optional step 1308 suitably includes maintaining a 
data log of information provided by the various portions of the Web site. All content in 
which characters have been encoded or removed can be logged so that the log can be 
reviewed to determine if the Web site is being used to compromise a network client. 
For example, all content provided from the Web page, all content provided from within 
the trusted portion, all content having scripting/programming content, all content from 
outside the trusted portion, or any other part of the Web site content could be logged 
into one or more dataf.les. The datafiles may be suitably searched or otherwise 
consulted to determine whether there have been attempts to provide unauthorized 

content to users by the server. 

In some cases internal machines can be attacked by a "criminal" site sending 
content that contains script to a network server that can log the content in audit trail 
(e.g., log) files. Given that a browser may have been configured a heightened trust for 
files residing on the server, in various embodiments, when a user reviews the audit trail 
files of Web and other e-commerce servers by using the browser, a script may be 
executed on the network client with the trust level of the network server that delivered 
the audit trail records (e.g., with a heightened trust level). Execution of this script may 
cause an attack which may occur long after the script was sent to the network server. 
This attack is preventable using the same methods and procedures described above to 
prevent cross site scripting, such as the "criminal" attacks described above. A filter, 
such as the one described in Figure 13, running on a network server, such as a Web 
server, or running on a network client, such as a PC browser, can filter for script control 
characters and encode the characters, reject the characters or reject the entire record. 

The corresponding structures, materials, acts and equivalents of all elements in 
the claims below are intended to include any structure, material or acts for performing 
the functions in combination with other claimed elements as specifically claimed. The 
scope of the invention should be determined by the allowed claims and their legal 
equivalents, rather than by the examples given above. 
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CLAIMS 



What is claimed is: 



3. 



A method for conducting a transaction, the method comprising: 
a. receiving a transaction request (1102) from a user (110) at a server 
(140); 

b issuing a challenge (1106, 1 108) to the user (1 10); 

c. receiving a response (1110) from the user (110) based upon said 

challenge (1108); 
d processing (1114) said response to verify an instrument; 
e. assembling credentials for the transaction (1114), said credentials 

comprising at least one key; 
f providing at least a portion of said credentials to said user; 

g. receiving a second request from said user, said second request including 
said portion of said credentials; and 

h. validating said portion of said credentials with said key to provide access 
to a transaction service. 

The method of Claim 1, wherein the transaction is an electronic purchase 
transaction. 

The method of Claim 2, wherein the electronic purchase transaction is 
conducted using a digital wallet. 



4. The method of Claim 1 , wherein the instrument is a smartcard. 

5. A method for protecting a network server from being used as the basis of an 
attack on a network client, the method comprising: 

a. restricting access to said network server (1302) to a portion of said 
network server for at least a selected protocol; and 

b. scanning said portion of said network server for particular characters 
(1304), said particular characters being associated with said selected 
protocol. 
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6. The method of Claim 5, further comprising removing said particular characters 
(1304) such that a security risk posed by said selected protocol is reduced. 



5 7. 



The method of Claim 5, further comprising replacing said particular characters 
with benign characters (1306) such that a security risk posed by said selected 
protocol is reduced. 

8. The method of Claim 5, wherein said characters are hostile characters and 
10 wherein if a request contains any of said hostile characters, the request is 

rejected. 

9. The method of Claim 5, further comprising logging said particular characters to 
form a security log (1 308). 

15 

10. The method of Claim 9, further comprising reviewing said security log to 
determine whether said particular characters are hostile. 

11. The method of Claim 5, wherein said protection of the network server is 
20 accomplished during an electronic purchase transaction. 

12. The method of Claim 11, wherein the electronic purchase transaction is 
conducted using a digital wallet. 

25 13. A transaction system (1 00), wherein the transaction system comprises: 

a. a user computer (110), wherein said user computer is operated by a 
user; 

b. a transaction authorizer computer (120); 

c. a data network (102), wherein when the user wishes to execute a 
30 transaction, a connection is established between said user computer and 

said transaction authorizer computer via said data network; and 

d. a security server (1 30), wherein a connection is established between said 
security server and said user computer to verify that an intelligent token 
is in the user's possession. 

31 



3NSDOC I D: <WO 0 1 1 6900A2_I_> 



WO 01/16900 



PCT/US00/23817 



1 4. The transaction system of Claim 1 3, further comprising a transaction tool server 
(140). 

15. The transaction system of Claim 13, wherein the user (110) is a purchaser, the 
transaction authorizer (120) is a merchant and the user and merchant 
consummate a purchase transaction. 

1 6. The transaction system of Claim 1 5, further comprising a wallet server (1 40). 

17. The transaction system of Claim 1 3, wherein the user computer (110) comprises 
a transaction tool (214) and a reader (204), wherein said reader is capable of 
transferring information between the transaction tool and the intelligent token 

18. The transaction system of Claim 17, wherein said transaction tool (214) is a 
wallet client. 

19. The transaction system of Claim 13, wherein the intelligent token (202) is a 
smartcard. 

20. The transaction system of Claim 13, wherein the connection between said 
security server (130) and said transaction authorizer computer (120) is through 
a data connection separate from said data network (152). 

21. The transaction system of Claim 17, wherein said transaction tool (140) 
communicates with said security server (130) via a data connection separate 
from said data network (150). 

22. The transaction system of Claim 13, wherein the intelligent token (202) 
comprises a digital certificate that uniquely identifies the user associated with 
the intelligent token. 
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23. The transaction system of Claim 22, wherein the user of said intelligent token 
unlocks access to the digital certificate by use of a personal identifier. 

24. The transaction system of Claim 1 3, wherein the intelligent token is issued by an 
5 issuer and wherein a transaction made using said transaction system is 

considered a "card present" transaction as deemed by the issuer of the 
intelligent token. 

25. A digital wallet comprising: 

10 a. at least one server; and 

b. an activator for accessing said at least one server, wherein said activator 
exchanges information with said at least one server. 

26. The digital wallet of Claim 25, wherein said at least one server includes a digital 
15 wallet server. 

27. The digital wallet of Claim 25, wherein said at least one server includes at least 
one non-wallet application. 

20 28. The digital wallet of Claim 25, wherein a client window is displayed in a browser 
window. 

29. The digital wallet of Claim 25 further comprising a toolbar (502). 

25 30. A digital wallet comprising: 

a. at least one server; and 

b. a toolbar (502). 

31 . The digital wallet of Claim 30, wherein said digital wallet further comprises an 
30 activator. 

32. The digital wallet of Claim 31 , wherein said toolbar performs a small download 
of said activator. 
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33. The digital wallet of Claim 30, wherein said toolbar utilizes an operating system 
control element. 

34. The digital wallet of Claim 33, wherein the operating system control element is a 
5 system tray icon. 

35. The digital wallet of Claim 30, further comprising a transaction authorize 
window. 

10 36. The digital wallet of Claim 35, wherein said toolbar is a discrete window that 
associates with the transaction authorizer window. 

37. The digital wallet of Claim 30, further comprising a form fill component which 
, allows a user to pre-fill forms. 

15 38. The digital wallet of Claim 37, wherein the form fill component comprises a 
model that characterizes a transaction authorizer site. 

39. The digital wallet of Claim 37, wherein the form fill component comprises a 
20 model that characterizes a user. 

40. The digital wallet of Claim 37, wherein the form fill component comprises: 

a. a model that characterizes a transaction authorizer site; and 

b. a model that characterizes a user . 



25 



41 . The digital wallet of Claim 30, further comprising an auto-remember component. 

42. The digital wallet of Claim 36, wherein the auto-remember component includes 
heuristics based field recognition. 
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